Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/10fb3a3f-1c6e-3c48-b9cc-a508905cc513.roa
File:                     10fb3a3f-1c6e-3c48-b9cc-a508905cc513.roa (raw, json)
Hash identifier:          ytPK8CAF1KcmWp4wYxjSZLJE8CEHsGDarUWDlyJI3V4=
Subject key identifier:   A1:77:08:D1:DC:83:0D:99:AC:BC:A1:B0:DA:6E:F0:8A:F2:3C:CD:24
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E7787FEFE3AF8600F280
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/10fb3a3f-1c6e-3c48-b9cc-a508905cc513.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        75.98.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e7:78:7f:ef:e3:af:86:00:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=206ffb11-7084-4b36-ab14-5d70e6f0a942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:aa:11:9a:de:3f:7c:53:fd:9e:9f:e5:fa:
                    e9:92:47:51:e5:73:a3:40:3c:e6:d1:58:a9:2b:14:
                    62:83:eb:3a:f0:67:07:62:13:2b:0d:b1:8d:0a:8a:
                    46:15:c6:91:f2:49:39:b5:09:92:ef:01:98:c2:4a:
                    a0:fe:0c:be:56:5a:82:f7:85:23:3f:12:75:d0:46:
                    be:09:d7:5d:97:0b:58:b2:9d:b9:0f:93:83:49:15:
                    7d:0c:d4:77:1e:c5:72:25:39:46:7f:28:e3:10:39:
                    2b:21:86:f8:12:c5:55:98:d3:2a:c6:dd:a2:1f:01:
                    fa:fb:72:48:28:97:72:fe:bd:80:47:e7:85:23:16:
                    4d:cb:49:e4:46:57:c6:ce:85:68:5e:d0:0e:36:aa:
                    cd:a5:a9:82:d6:dc:50:5f:53:56:f6:19:c4:ad:65:
                    67:f7:2e:1c:cc:59:6f:0b:ef:a8:b3:2b:e2:d2:90:
                    51:13:0a:c2:95:d4:4a:02:43:ed:c7:48:63:3c:4d:
                    e7:78:44:25:3b:fa:93:68:51:36:82:d0:e1:f7:cd:
                    29:9b:f0:95:c8:0f:d2:1b:58:dd:ac:9f:24:f2:5f:
                    9d:1b:91:5f:d2:ba:5b:9d:d9:38:7a:84:cc:c3:00:
                    7e:37:17:24:10:f9:32:53:a0:04:3d:f1:22:54:78:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:08:D1:DC:83:0D:99:AC:BC:A1:B0:DA:6E:F0:8A:F2:3C:CD:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/10fb3a3f-1c6e-3c48-b9cc-a508905cc513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:21:95:31:11:13:3d:f8:19:ad:c8:32:66:58:ae:ff:db:
         0a:72:46:ff:23:7b:da:9f:0e:5b:60:1f:ba:f8:7d:ed:89:6d:
         7a:c9:c7:df:21:90:1c:93:2a:a9:60:b6:46:26:d0:a8:d8:2d:
         b6:79:72:33:e8:1a:1d:64:8f:9d:f7:20:4e:c9:7d:04:22:09:
         64:13:8b:99:25:1c:f1:a7:fc:a8:81:42:39:ab:b8:b8:57:39:
         96:ee:f2:e8:bc:07:59:7f:93:1a:e0:54:eb:6e:67:b0:04:ef:
         51:22:91:17:92:c2:73:30:a6:f0:59:6a:19:2f:26:9b:40:a9:
         db:11:64:c9:e4:4e:85:90:4f:d9:1e:f0:ca:81:fe:bf:6d:a9:
         56:3f:29:31:e6:56:aa:9a:d0:d8:3d:06:6a:28:ed:f3:66:81:
         13:8f:e1:1f:3b:7f:0a:3b:38:ff:19:c5:fd:9c:f5:58:0c:d4:
         ad:dd:48:07:c9:89:a2:19:1c:d6:4f:7b:0d:23:45:86:4d:0f:
         1b:35:34:41:88:e7:1e:d0:2f:7a:2c:5e:a8:de:87:ea:a6:03:
         65:cc:62:c0:ec:4a:3e:02:f5:bc:cc:ca:dd:8d:66:e8:56:30:
         b6:a9:ff:2b:48:3c:74:e2:1e:65:4c:9b:93:33:4f:a8:bd:8a:
         db:41:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:16 2026 by rpki-client